Malicious PDF — malware analysis report

Static analysis result for SHA-256 c25e1ab4848cffdf…

MALICIOUS

PDF

34.4 KB Created: 2019-12-09 13:01:10 +03:00 Authoring application: Adobe PageMaker 6.5 (via Acrobat Distiller 5.0 (Windows))
MD5: 55e280c86096ad789c831ecf2ad0987d SHA-1: 7229ad18f72269ffb147dc2b514d9d0a602f40ec SHA-256: c25e1ab4848cffdf9351b27e02f385bf810917df87f31e21535e5033a7abfae4
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF file contains a large number of embedded links pointing to external PDF documents on the domain 'gorillawalker.com'. This behavior is indicative of a link farm or a redirection scheme designed to lead users to potentially malicious content. The ML classifier also flagged this PDF as malicious, supporting the suspicious nature of the embedded links.

Machine Learning

  • Nyx PDF Classifier malicious score 0.8315

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.gorillawalker.com/strategisches-controlling-in-venture-capital-gesellschaften-voraussetzungen-aufgaben-instrumente-german.pdf
    • http://www.gorillawalker.com/surgical-atlas-of-airway-and-facial-trauma-comprehensive-surgical-atlases.pdf
    • http://www.gorillawalker.com/short-term-forecasting-for-empirical-economists-a-survey-of-the.pdf
    • http://www.gorillawalker.com/the-call-of-memory-learning-about-the-holocaust-through-narrative.pdf
    • http://www.gorillawalker.com/bugging-out-the-bugging-out-series-volume-1.pdf
    • http://www.gorillawalker.com/the-fortune-tellers-inside-wall-street-s-game-of-money.pdf
    • http://www.gorillawalker.com/revelaciones-del-arte-popular-mexicano-spanish-edition.pdf
    • http://www.gorillawalker.com/jung-and-tarot-an-archetypal-journey.pdf
    • http://www.gorillawalker.com/psychotherapy-and-personality-change.pdf
    • http://www.gorillawalker.com/the-geometry-of-physics-kindle-edition.pdf
    • http://www.gorillawalker.com/tales-from-ovid-twenty-four-passages-from-the-metamorphoses.pdf
    • http://www.gorillawalker.com/modernism-and-totalitarianism-rethinking-the-intellectual-sources-of-nazism-and.pdf
    • http://www.gorillawalker.com/disaster-law.pdf
    • http://www.gorillawalker.com/german-i-2nd-ed-pimsleur-language-program.pdf
    • http://www.gorillawalker.com/her-submissive-awakening-interracial-african-american-bdsm-erotica-submitting-to.pdf
    • http://www.gorillawalker.com/read-aloud-bible-stories-vol-5-the-stories-jesus-told.pdf
    • http://www.gorillawalker.com/photography-and-philosophy-essays-on-the-pencil-of-nature.pdf
    • http://www.gorillawalker.com/the-prism-of-just-war-justice-international-law-and-global.pdf
    • http://www.gorillawalker.com/scholastic-discover-more-stickers-sharks.pdf
    • http://www.gorillawalker.com/storied-inquiries-in-international-landscapes-an-anthology-of-educational-research.pdf
    • http://www.gorillawalker.com/color-is-in-the-eye-of-the-beholder.pdf
    • http://www.gorillawalker.com/soul-eater-17.pdf
    • http://www.gorillawalker.com/legendary-the-legendary-series.pdf
    • http://www.gorillawalker.com/her-tiger-billionaire-a-bbw-paranormal-shifter-erotic-romance-supernatural.pdf
    • http://www.gorillawalker.com/africa-geographic-august-2003-ngorongoro-niger-namaqualand-maasai-zambia-kafue.pdf
    • http://www.gorillawalker.com/right-time-right-place-coming-of-age-with-william-f.pdf
    • http://www.gorillawalker.com/101-defensive-stunts-for-youth-football-coaches-choice.pdf
    • http://www.gorillawalker.com/instant-psychopharmacology-third-edition.pdf
    • http://www.gorillawalker.com/lesbian-and-bisexual-women-s-mental-health.pdf
    • http://www.gorillawalker.com/the-ten-light-bodies-of-consciousness.pdf
    • http://www.gorillawalker.com/so-that-s-where-they-came-from.pdf
    • http://www.gorillawalker.com/lean-mean-and-green-what-to-eat-and-how-to.pdf
    • http://www.gorillawalker.com/what-remains-david-raker-series.pdf
    • http://www.gorillawalker.com/photosuisse.pdf
    • http://www.gorillawalker.com/microchip-fabrication-a-practical-guide-to-semiconductor-processing.pdf
    • http://www.gorillawalker.com/las-vegas-2015-the-food-enthusiast-s-complete-restaurant-guide.pdf
    • http://www.gorillawalker.com/free-stuff-for-kids-on-the-net-cool-sites.pdf
    • http://www.gorillawalker.com/a-taoist-classic-the-book-of-lao-zi.pdf
    • http://www.gorillawalker.com/the-end-of-the-certain-world-the-life-and-science.pdf
    • http://www.gorillawalker.com/strobist-photo-trade-secrets-volume-2-portrait-lighting-techniques-one.pdf
    • http://www.gorillawalker.com/tale
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#
    • http://purl.org/dc/elements/1.1/
    • http://ns.adobe.com/xap/1.0/
    • http://ns.adobe.com/pdf/1.3/
    • http://ns.adobe.com/xap/1.0/mm/
    • http://www.aiim.org/pdfa/ns/extension/
    • http://www.aiim.org/pdfa/ns/schema#
    • http://www.aiim.org/pdfa/ns/property#
    • http://www.aiim.org/pdfa/ns/id/

Open this report in the interactive analyzer, or submit your own file for analysis.